Lucene search
HistoryOct 17, 2006 - 5:07 p.m.
CVE-2006-5316
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
AI Score
6.3
Confidence
Low
EPSS
0.005
Percentile
76.0%
registroTL stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for /usuarios.dat.
Affected configurations
Node
phplibreregistrotlMatch0.1b
ORphplibreregistrotlMatch0.5b
| Vendor | Product | Version | CPE |
|---|---|---|---|
| phplibre | registrotl | 0.1b | cpe:2.3:a:phplibre:registrotl:0.1b:*:*:*:*:*:*:* |
| phplibre | registrotl | 0.5b | cpe:2.3:a:phplibre:registrotl:0.5b:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2006-5316
2006-10-17 17:00:00
cve
cve
CVE-2006-5316
2006-10-17 17:07:00
exploitdb
exploitdb
registroTL - 'main.php' Remote File Inclusion
2006-10-10 00:00:00
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
AI Score
6.3
Confidence
Low
EPSS
0.005
Percentile
76.0%
Related for NVD:CVE-2006-5316